Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

9c1df1b9bf...6f.exe

windows7-x64

3

9c1df1b9bf...6f.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/12/2022, 19:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9c1df1b9bf019cd3c7807f63a2d4f1b148b755d8b84fc861e2fac600b813b36f.exe

  • Size

    49KB

  • MD5

    b727f4a7f1c8d74bd98c9c01dd15badb

  • SHA1

    5a61f304c70812ab2515cef5347b51cc6cab9493

  • SHA256

    9c1df1b9bf019cd3c7807f63a2d4f1b148b755d8b84fc861e2fac600b813b36f

  • SHA512

    28925b3abd182cfd3704cc413f3e96c00755a00a3bee9539aa02c3632151a4e082a2bd10ef0cd640915c69d4e0e8ccffd23507dda79b3841ac2196d7cde8a107

  • SSDEEP

    1536:1Ly+NOVU3lTm6FMBxNrPdX9u5LosXp4qgBamwMS:YWn3Rm6FMPNrP+uG4tAmwMS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9c1df1b9bf019cd3c7807f63a2d4f1b148b755d8b84fc861e2fac600b813b36f.exe
    "C:\Users\Admin\AppData\Local\Temp\9c1df1b9bf019cd3c7807f63a2d4f1b148b755d8b84fc861e2fac600b813b36f.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4180
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 316
      2⤵
      • Program crash
      PID:3112
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4180 -ip 4180
    1⤵
      PID:4760

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4180-132-0x0000000000400000-0x0000000000418000-memory.dmp

      Filesize

      96KB

      Download